Ransomware Group: AKIRA

VICTIM NAME: Harbor Diesel & Equipment

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the AKIRA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

Harbor Diesel & Equipment is identified as the victim in a ransomware leak page attributed to the Akira group. The post is dated October 7, 2025. The leak page presents Harbor Diesel & Equipment as a US-based manufacturing entity involved in heavy machinery distribution and related services, and frames the company as the target of a data exfiltration operation. The narrative notes Harbor Diesel & Equipment as the victim and references the attackers’ public breach notice, with emphasis on data exposure rather than encryption at this stage.

The post states the attackers plan to upload approximately 7 GB of data soon. The materials described include customer information, W-9 forms, detailed employee information, financial and accounting files, contracts, and agreements. There is no explicit ransom amount mentioned on the page. A defanged link to the attackers’ claimed ransom page is present in the post, but any direct URL is not displayed in this summary.

Visual content appears to be absent on the leak page: the metadata indicates zero images or screenshots. The date provided is treated as the post date (October 7, 2025) since no separate compromise date is given. Overall, the page centers on a forthcoming data release rather than showcased samples, with no visible evidence of encryption on the page itself.